Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
File: aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft (raw, json)
Hash identifier: sBaiDXWzPgy7AqYBrQvWffsJsjz7aQRxVDfEWLDWP3g=
Subject key identifier: C5:BA:6A:1A:BE:D4:49:39:29:DF:47:9A:F0:86:73:71:B2:88:5F:63
Authority key identifier: 68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
Certificate issuer: /CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Certificate serial: 01987A51CB114244D53028F76BF4B65B2395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
Manifest number: 05DD
Signing time: Tue 05 Aug 2025 13:00:37 +0000
Manifest this update: Tue 05 Aug 2025 13:00:37 +0000
Manifest next update: Wed 06 Aug 2025 13:00:37 +0000
Files and hashes: 1: VftZMAe-HTAVpMfwxes2FDGztqs.roa (hash: KKajIYpdkVhXrGRISoXddoe+7uEBtFz7JC2M/TbIWjs=)
2: aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl (hash: EzyRLCc2VMYrYbqCfjE1294DdvwMvqbXdBLvParGBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:cb:11:42:44:d5:30:28:f7:6b:f4:b6:5b:23:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Validity
Not Before: Aug 5 13:00:37 2025 GMT
Not After : Aug 6 13:00:37 2025 GMT
Subject: CN=c5ba6a1abed4493929df479af0867371b2885f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:ff:9b:b4:fc:a9:22:5a:34:3c:03:a0:fb:
28:75:c2:50:a3:13:9c:6c:cd:65:cb:60:71:99:53:
b3:fb:fe:0b:fe:d1:93:31:a3:fe:2b:3e:18:11:e3:
9f:8f:14:7a:8f:ba:2e:b0:b0:72:71:eb:ba:41:19:
2c:7f:f1:85:3b:05:7d:2e:b3:89:34:97:ce:85:12:
e9:2b:58:a7:e2:4a:07:04:61:52:61:37:ec:84:b8:
57:74:63:8a:91:b1:f0:8e:85:46:60:fa:2e:30:ad:
01:cc:b6:84:36:f5:06:d7:14:31:43:21:b0:59:c2:
1d:dc:b4:97:85:ca:08:42:59:9b:c0:3b:c1:a1:18:
fc:60:04:ea:3e:2a:c7:dc:13:8f:7e:d0:02:24:f8:
f4:0a:77:b9:52:6c:87:a4:7d:83:af:dc:d6:23:e9:
91:4a:f8:ed:af:b0:54:48:56:c6:67:ac:c0:38:b1:
85:63:d1:e0:af:c1:e8:0f:11:2e:80:0a:a0:ad:aa:
1e:20:1e:be:e7:52:f9:b1:d9:77:61:e1:2b:85:0b:
10:da:d4:86:f1:d7:64:a3:fe:21:27:41:c7:bd:8e:
3f:de:c0:d5:05:b5:2d:f2:a7:c6:43:b3:8c:ed:03:
5d:ee:69:7c:87:93:be:6c:27:82:7a:4b:cc:d3:5e:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BA:6A:1A:BE:D4:49:39:29:DF:47:9A:F0:86:73:71:B2:88:5F:63
X509v3 Authority Key Identifier:
keyid:68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:71:10:4f:a8:dd:4a:e7:44:cb:84:4f:25:c6:ea:11:11:
ba:40:8c:6c:1e:d8:3a:96:7a:f6:60:fd:10:08:d7:75:ff:f3:
79:40:07:a3:a2:45:be:cc:9c:fb:2f:cb:93:df:2f:3e:5d:24:
d0:84:8e:09:11:b9:90:89:06:1e:6c:1c:ed:f5:53:81:40:08:
58:01:49:6b:32:ea:2d:d7:8d:2c:c2:d9:89:4d:ac:4d:42:c4:
51:d4:69:22:5c:4a:0c:3b:06:3e:b4:e2:d3:b9:e0:8b:53:08:
20:53:ce:a2:e1:6a:1a:64:03:f6:b4:08:15:1e:30:8d:b2:8e:
5b:73:98:a7:e0:07:c8:ea:a1:43:e7:44:74:db:80:75:bb:89:
41:37:73:c0:51:78:ea:41:0f:47:ca:e7:94:0a:a2:ef:83:52:
f7:fa:f1:5a:99:44:1e:d6:0c:de:67:18:4a:40:7f:8b:76:b3:
7f:69:db:1b:52:78:61:ce:43:d8:75:69:c2:31:f9:43:33:41:
52:f6:ce:11:41:30:5a:b8:c0:d9:10:45:64:16:23:a2:85:dc:
14:1f:36:b6:69:4a:87:60:d9:92:5c:12:aa:2d:51:fb:72:08:
21:67:1e:ca:e0:c5:d8:ee:63:a2:f9:58:91:bc:bb:5c:30:af:
eb:e1:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:05 2025 by rpki-client